Google Threat Intelligence in Elastic Security
Elastic Security natively ingests Google Threat Intelligence: known-malicious IPs, domains, URLs, and file hashes matched against your telemetry the moment they appear, each carrying a…
Category: ThreatIntelligence-IncidentResponse
Microsoft Sentinel detection rules: automatic migration to Elastic
Elastic automatically translates your Microsoft Sentinel detection rules into Elastic Security. Export your Scheduled and Near Real Time (NRT) analytics rules from Sentinel, upload them,…
Elastic Defend: 800+ vulnerable driver YARA rules
We know you’re tired of hearing how every vendor is going to finally help you solve alert fatigue. Well, one way we’re improving alert fatigue…
Elastic Security at Black Hat 2026: Alert Zero and agentic SOC
At Elastic, we know that the best way to build security tools is to bring them to the community, have security pros use them, and…
SOC case management and detection rule history
Elastic Security now tracks every change to a detection rule and lets you roll back to any previous version with one click. The same history…
Beyond Patching: What IT Teams Need to Know About Unpatchable Exposures
Executive Summary Most IT teams still operate under a false binary: patch or accept risk. That assumption creates unnecessary operational pressure. Patchless remediation is real…
A Detection Engineer’s Guide for Delegating Work to AI
Detection rules fail in two directions: they can be too broad and create false positive alerts for the Security Operations Center (SOC) to triage, or…
New Partner View for Security Incident Investigations
For a long time, partners have told us the same thing: when an investigation was closed as benign, it was hard to know what actually…
5 Modern Threats You Need to Watch
More tools. More alerts. More late nights. And yet, the incidents that keep blowing up your week rarely start with some flashy, sophisticated exploit. They…
Every Ransomware Attack Has a Backstory
Ransomware is the part of the attack that gets the most attention. It’s the locked screens, the ransom note, the disrupted workflows, the scramble to…
Wishin’ for Switchin’? The Huntress Buyout Program Has You Covered
Picture this scene: I’m at the Huntress booth at a trade show. Partner walks up, “I love Huntress. I wish we were using you guys,…
Custom HTML for Custom Phishing: Make the Fake Feel Real
It happens all the time in Business Email Compromise (BEC) attacks: someone in the finance department gets an invoice email from what looks like a…